CVE-2019-25544
Published Mar 21, 2026Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creat…
Vendor archive
pidgin CVEs
Beta · best-effort91 CVEs tagged to vendor pidgin — 8 Critical, 13 High, 65 Medium, 5 Low, 0 Unrated.
CVE-2022-26491
Published Jun 2, 2022An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS…
CVE-2012-1257
Published Nov 20, 2019Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.
CVE-2016-1000030
Published Sep 5, 2018Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and gnutls_x509_crt_i…
CVE-2017-2640
Published Jul 27, 2018An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute a…
CVE-2016-2379
Published Mar 29, 2017The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration c…
CVE-2016-4323
Published Jan 6, 2017A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an overwrite of files. A…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2016-2380
Published Jan 6, 2017An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the server could potentially result in an out-of-bounds read. A user…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2016-2378
Published Jan 6, 2017A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. Specially crafted data sent via the server could potentially result in a buffer overflow, poten…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2016-2377
Published Jan 6, 2017A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent by the server could potentially result in an out-of-bounds…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2016-2376
Published Jan 6, 2017A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2016-2375
Published Jan 6, 2017An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT contact information sent from the server can result in memory discl…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2016-2374
Published Jan 6, 2017An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an o…
CVE-2016-2373
Published Jan 6, 2017A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-boun…
CVE-2016-2372
Published Jan 6, 2017An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-bounds read. A mal…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2016-2371
Published Jan 6, 2017An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could cause memory corruption resulting…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2016-2370
Published Jan 6, 2017A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an out-of-bou…
CVE-2016-2369
Published Jan 6, 2017A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a denia…
CVE-2016-2368
Published Jan 6, 2017Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could result in multiple buffer ov…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2016-2367
Published Jan 6, 2017An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-bounds read. A mal…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2016-2366
Published Jan 6, 2017A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-boun…
CVE-2016-2365
Published Jan 6, 2017A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a null pointer…
CVE-2014-3698
Published Oct 29, 2014The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to obtain sensitive information from proces…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2014-3697
Published Oct 29, 2014Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a dr…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2014-3696
Published Oct 29, 2014nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a crafted server…
- evidence mentions
- 1
- Buzz score
- 11.9
Showing 1-25 of 91 CVEsPage 1 of 4